IN THE CLAIMS 
This listing of claims replaces all prior listings. 

1 . (currently amended) A method in a data processing system having a program, the method 
comprising the steps performed by the program of: 

asynchronously receiving information about a computer-based system by subscribing to the 
information; and 

calculating a risk level at which the computer-based system operates based on the received 
information; 

calculating an exposure level to failure of the computer-based system based on the received 
information; and 

calculating a confidence level of the exposure level 

wherein the risk level is calculated based on the exposure level and confidence level and 
wherein the risk level is calculated using the formula: 

risk level = exposure level * confidence level / a mitigating factor. 

where the mitigating factor is a value associated with the computer-based system . 

2. (original) The method according to claim 1 , further comprising the step of outputting the 
calculated risk level. 

3. (canceled). 

4. (canceled). 

5 . (currently amended) The method according to claim 1 3-, wherein the confidence level is 
increased each time the exposure level for the computer-based system is calculated and exceeds a 
predetermined value. 
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6. (currently amended) The method according to claim 1 3-, wherein a rule engine is used to 
calculate the exposure level, the rule engine asynchronously receiving the information about the 
computer-based system as an input, and outputting the exposure level as an output. 

7. (original) The method according to claim 6, wherein the rule engine comprises a plurality 
of rule engines each operating asynchronously; and wherein the risk level is calculated based on the 
exposure levels output from at least one of the rule engines. 

8. (original) The method according to claim 1, wherein the computer-based system is at 
least one of a data processing system, a component of a data processing system, and a computer 
program. 

9. (canceled). 

10. (original) The method according to claim 1, wherein the risk level is published to a 
network connected to the data processing system. 

1 1 . (original) The method according to claim 1 , wherein the received information comprises 
at least one of fault information, hardware configuration information, and software configuration 
information about the computer-based system. 

12. (original) The method according to claim 1, further comprising the step of: 
determining a difficulty value for reducing the exposure level. 

13. (original) The method according to claim 12, further comprising the step of: 
outputting the difficulty value. 

14. (original) The method according to claim 12, further comprising the step of: 
determining a cost associated with reducing the exposure level. 
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15. (original) The method according to claim 14, further comprising the step of: 
outputting the cost. 

16. (original) The method according to claim 1, further comprising the steps of: 
calculating at least a second risk level at which the computer-based system operates based on 

the received information; and 

trending the risk level and the at least second risk level by calculating a moving average of 
the risk levels for the computer-based system. 

17. (currently amended) A computer-readable storage medium containing instructions that 
cause a data processing system having a program to perform a method comprising the steps 
performed by the program of: 

asynchronously receiving information about a computer-based system by subscribing to the 
information; sad 

calculating a risk level at which the computer-based system operates based on the received 
information; 

calculating an exposure level to failure of the computer-based system based on the received 
information; and 

calculating a confidence level of the exposure level 

wherein the risk level is calculated based on the exposure level and confidence level and 

wherein the risk level is calculated using the formula: 

risk level = exposure level * confidence level / a mitigating factor, 

where the mitigating factor is a value associated with the computer-based system . 

18. (previously presented) The computer-readable storage medium according to claim 17, 
further comprising the step of outputting the calculated risk level. 

19. (canceled). 

20. (canceled). 
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2 1 . (currently amended) The computer-readable storage medium according to claim 17 49, 
wherein the confidence level is increased each time the exposure level for the computer-based 
system is calculated and exceeds a predetermined value. 

22. (currently amended) The computer-readable storage medium according to claim 17 49, 
wherein a rule engine is used to calculate the exposure level, the rule engine asynchronously 
receiving the information about the computer-based system as an input, and outputting the exposure 
level as an output. 

23. (previously presented) The computer-readable storage medium according to claim 22, 
wherein the rule engine comprises a plurality of rule engines each operating asynchronously; and 
wherein the risk level is calculated based on the exposure levels output from at least one of the rule 
engines. 

24. (previously presented) The computer-readable storage medium according to claim 17, 
wherein the computer-based system is at least one of a data processing system, a component of a 
data processing system, and a computer program. 

25. (canceled). 

26. (previously presented) The computer-readable storage medium according to claim 17, 
wherein the risk level is published to a network connected to the data processing system. 

27. (previously presented) The computer-readable storage medium according to claim 17, 
wherein the received information comprises at least one of fault information, hardware configuration 
information, and software configuration information about the computer-based system. 
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28. (previously presented) The computer-readable storage medium according to claim 17, 
further comprising the step of: 

determining a difficulty value for reducing the exposure level. 

29. (previously presented) The computer-readable storage medium according to claim 28, 
further comprising the step of: 

outputting the difficulty value. 

30. (previously presented) The computer-readable storage medium according to claim 28, 
further comprising the step of: 

determining a cost associated with reducing the exposure level. 

3 1 . (previously presented) The computer-readable storage medium according to claim 30, 
further comprising the step of: 

outputting the cost. 

32. (previously presented) The computer-readable storage medium according to claim 17, 
further comprising the steps of: 

calculating at least a second risk level at which the computer-based system operates based on 
the received information; and 

trending the risk level and the at least second risk level by calculating a moving average of 
the risk levels for the computer-based system. 

33. (currently amended) A data processing system comprising: 

a memory comprising a program that asynchronously receives information about a computer- 
based system by subscribing to the information, and calculates a risk level at which the computer- 
based system operates based on the received informatio n, calculates an exposure level to failure of 
the computer-based system based on the received information, and calculates a confidence level of 
the exposure level, wherein the risk level is calculated based on the exposure level and confidence 
level, and wherein the risk level is calculated using the formula: 

risk level = exposure level * confidence level / a mitigating factor, 
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where the mitigating factor is a value associated with the computer-based system ; and 
a processing unit that runs the program. 

34. (original) The data processing system according to claim 33, wherein the program 
further outputs the calculated risk level. 

35. (canceled). 

36. (canceled). 

37. (currently amended) The data processing system according to claim 33 wherein the 
confidence level is increased each time the exposure level for the computer-based system is 
calculated and exceeds a predetermined value. 

38. (currently amended) The data processing system according to claim 33 3$, wherein a 
rule engine is used to calculate the exposure level, the rule engine asynchronously receiving the 
information about the computer-based system as an input, and outputting the exposure level as an 
output. 

39. (original) The data processing system according to claim 38, wherein the rule engine 
comprises a plurality of rule engines each operating asynchronously; and wherein the risk level is 
calculated based on the exposure levels output from at least one of the rule engines. 

40. (original) The data processing system according to claim 33, wherein the computer- 
based system is at least one of a data processing system, a component of a data processing system, 
and a computer program. 

41. (canceled). 

42. (original) The data processing system according to claim 33, wherein the risk level is 
published to a network connected to the data processing system. 
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43. (original) The data processing system according to claim 33, wherein the received 
information comprises at least one of fault information, hardware configuration information, and 
software configuration information about the computer-based system. 

44. (original) The data processing system according to claim 33, wherein the program 
further determines a difficulty value for reducing the exposure level. 

45. (original) The method according to claim 44, wherein the program further outputs the 
difficulty value. 

46. (original) The data processing system according to claim 44, wherein the program 
further determines a cost associated with reducing the exposure level. 

47. (original) The data processing system according to claim 46, wherein the program 
further outputs the cost. 

48. (original) The data processing system according to claim 33, wherein the program 
further calculates at least a second risk level at which the computer-based system operates based on 
the received information, and trends the risk level and the at least second risk level by calculating a 
moving average of the risk levels for the computer-based system. 

49. (currently amended) A data processing system comprising: 

means for asynchronously receiving information about a computer-based system by 
subscribing to the information; and 

means for calculating a risk level at which the computer-based system operates based on the 
received information; 
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means for calculating an exposure level to failure of the computer-based system based on the 
received information; and 

means for calculating a confidence level of the exposure level, 

wherein the risk level is calculated based on the exposure level and confidence level, and 

wherein the risk level is calculated using the formula: 

risk level = exposure level * confidence level / a mitigating factor, 

where the mitigating factor is a value associated with the computer-based system . 
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